Table 22 Priorities and meanings of apply clauses
Clause
apply precedence
apply next-hop
apply default-next-hop
Relationship between the match mode and clauses on the node
Does a packet match
all the if-match clauses
on the node?
Yes.
No.
A node that has no if-match clauses matches any packet.
PBR and Track
PBR can work with the Track feature to dynamically adapt the availability status of an apply clause to
the link status of a tracked object. The tracked object can be a next hop or default next hop.
•
When the track entry associated with an object changes to Negative, the apply clause is
invalid.
•
When the track entry changes to Positive or NotReady, the apply clause is valid.
For more information about Track-PBR collaboration, see High Availability Configuration Guide.
PBR configuration task list
Tasks at a glance
(Required.)
•
Creating a node
•
Setting match criteria for a node
•
Configuring actions for a node
(Required.)
•
Specifying a policy for local PBR
•
Specifying a policy for interface PBR
•
Specifying a policy for outbound PBR on a VXLAN tunnel interface
Meaning
Sets an IP precedence.
Sets next hops.
Sets default next hops.
Match mode
Permit
•
If the node is configured with
apply clauses, PBR executes the
apply clauses on the node. If the
PBR-based forwarding succeeds,
PBR does not compare the packet
with the next node.
•
If the node is configured with no
apply clauses, the packet is
forwarded according to the routing
table.
PBR compares the packet with the next
node.
Configuring a
policy:
Specifying a policy for PBR
Priority
This clause is always executed.
This clause is always executed.
This clause takes effect only when no next hop
is set or the next hop is invalid, and the packet
does not match any route in the routing table.
359
Deny
The packet is forwarded according
to the routing table.
PBR compares the packet with the
next node.